Skip to content
Threat Feed
Subscribe
high advisory

Newsmatic WordPress Theme: Blind SQL Injection (CVE-2026-110184)

The Newsmatic theme for WordPress is vulnerable to unauthenticated blind SQL injection in the slug parameter, allowing remote attackers to extract sensitive database information.

CVE search metadata

CVE search record: CVE-2026-110184. Severity: high. CVSS: 7.5. KEV: no. Product: Newsmatic (<= 1.5.0). Brief: Newsmatic WordPress Theme: Blind SQL Injection (CVE-2026-110184). Brief link: https://feed.craftedsignal.io/briefs/2026-10-newsmatic-sql-injection/

Triage facts

Revision 1
Applicability
Newsmatic (<= 1.5.0)
Evidence
Unknown
Severity
High
Action
Elevated
Sources
1 public source
Freshness
Revision 1Oct 29, 13:18 UTC
Detection
1 rule
Vulnerabilities
1 CVE
Source quality
A1Likely

The Newsmatic theme for WordPress (versions 1.5.0 and earlier) contains a vulnerability due to improper input sanitization and lack of parameterized SQL queries. An unauthenticated attacker can exploit this via the 'slug' parameter to execute arbitrary SQL commands, leading to unauthorized database information disclosure.

Impact

Successful exploitation allows for the extraction of sensitive information from the WordPress database by an unauthenticated attacker.

Recommendation

  • Update the Newsmatic theme for WordPress to a version patched beyond 1.5.0 immediately.
  • Audit web application logs for suspicious 'slug' parameters containing SQL syntax (e.g., SELECT, UNION, SLEEP, benchmark).
  • Implement a Web Application Firewall (WAF) to detect and block SQL injection patterns targeting the 'slug' parameter.

Immediate actions

Patch Newsmatic theme to the latest version beyond 1.5.0

IT Operations 48h

Threat Hunt

Identify anomalies in web access logs for the slug parameter

T1190 high medium confidence hunt now

Data: Web access logs (cs-uri-query)

Mitigations

Deploy WAF rule to filter SQL injection characters in slug parameter

immediate SOC

CVE-2026-110184

Detection coverage 1

Detects CVE-2026-110184 Exploitation - Blind SQL Injection via slug parameter

high

Detects attempts to exploit blind SQL injection in the Newsmatic theme by identifying common SQL keywords and function patterns within the slug URL parameter.

sigma tactics: initial_access techniques: T1190 sources: webserver

Detection queries are available on the platform. Get full rules →